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Appendix A 
Marked Up Version of the Amended Claims 

1 . A packet switching control system for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications; and 

control means (7) for performing a screening control of the packet switched connection 
on the basis of a screening parameter corresponding to the connection endpoint 
identification of the end terminal (5), wherein said control means (7) belongs to a 
different entity than said storing means. 

2. A system according to claim 1 , wherein said control means (7) belongs to any 
entity where a packet session is activated, while said storing means belongs to a fixed 
entity. 

3. A system according to claim 1 , wherein the control means (7) is arranged to 
download the subscriber-specific screening list, when the subscriber terminal (1) 
activates a packet data session. 

4. A system according to claim 3, wherein the control means (7) is arranged to 
download the subscriber-specific screening list, when a packet is transmitted. 



5. A system according to claim 3, wherein the control means (7) is arranged to 
load the subscriber-specific screening list from an external server or a location register 
(8) during an attach or location update procedure or a PDP context activation, and to 
store the loaded screening list in the storing means. 

6. A system according to claim 5, wherein the subscriber-specific screening list 
comprises a tag indicating whether the list contains allowed or denied connection 
endpoint identifications, and wherein the control means (7) is arranged to let pass only 
those data packets transmitted from/to an allowed connection endpoint. 

7. A system according to claim 3, wherein the subscriber-specific screening list is 
initialized as an empty list which is updated by the control means (7) each time the 
control means (7) receives a data packet with a connection endpoint identification not 
included in the subscriber-specific screening list. 

8. A system according to claim 7, wherein the update of the subscriber-specific 
screening list is performed by an inquiry to a service control function which answers to 
the inquiry by transmitting a connection parameter for the corresponding connection 
endpoint identification. 

9. (Amended) A system according to [any one of] claim[s] 3 [to 8], wherein the 
subscriber-specific screening list is propagated to other network elements, if it is has 
been modified by a subscriber. 



1 0. (Amended) A system according to [any one of the preceding] claim[s] 1_, 
wherein said control means (7) is a network element and arranged to perform packet 
screening for downlink packets in accordance with the subscriber-specific screening 
list. 

11. A system according to claim 10, wherein said network element (7) is arranged 
to monitor an uplink traffic transmitted from the subscriber terminal (1) via the packet 
switched connection and to command the subscriber terminal (1) to screen data 
packets transmitted to an end terminal (5) identified as a denied packet destination 
based on said subscriber-specific screening list. 

12. (Amended) A system according to claim 10 [or 1 1], wherein the 
communication network (4) is a General Packet Radio Services (GPRS) network and 
wherein the network element is a Gateway GPRS Support Node (GGSN) (7). 

13. A system according to claim 12, wherein the screening list comprises a 
charging information, and wherein the GGSN (7) is arranged to supply the charging 
information to a Serving GPRS Support Node (SGSN) (6) which performs a charging 
operation in accordance with the charging information. 

14. (Amended) A system according to [any one of the preceding] claim[s] 1, 
wherein the connection endpoint identification is one of a PDP address, an IP address, 



a subaddress space, a port number, a DNS hostname and protocol, a cipherkey or a 
combination of these. 

15. A subscriber terminal (1) for controlling a packet switched connection to an end 
terminal (5) identified by a connection endpoint identification in a communication 
network (4), comprising: 

loading means for loading a subscriber-specific screening list; and 
control means (7) for performing a packet screening for uplink packets on the basis of 
a screening list parameter corresponding to the connection endpoint identification of 
the end terminal (5). 

16. A subscriber terminal according to claim 15, wherein said subscriber terminal is 
a mobile station equipment. 

17. A packet switching control system for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications, wherein a detection point information for an 
interrogation of an Intelligent Network (IN) service control function can be set 
selectively for a specific connection endpoint identification in the subscriber-specific 
screening list; and 



# # 

control means (7) for triggering an IN interrogation, when a data packet with a 
connection endpoint identification, for which a detection point information is set, is 
transmitted via the packet switched connection. 

18. A system according to claim 17, wherein the IN interrogation is triggered only 
for a first data packet having a new connection endpoint identification marked with a 
detection point. 

1 9. (Amended) A system according to claim 1 7 [or 1 8], wherein the control means 
(7) is commanded by the service control function, which has received the IN 
interrogation, so as to replace the corresponding detection point information by a 
subscriber-specific screening information, and so to accept a data packet or to reject 
the data packet in accordance with the subscriber-specific screening information. 

20. (Amended) A system according to [any one of] claim[s] 1 9, wherein the 
service control function which has received the IN interrogation provides a more 
detailed subscriber-specific screening profile to the control means (7). 

21 . A packet switching control method for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising the steps of: 
providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; and 



performing a screening control of the packet switched connection in another entity on 
the basis of a screening parameter corresponding to the connection endpoint 
identification of the end terminal (5). 

22. A method according to claim 21, wherein the subscriber-specific screening list 
is loaded from an external server or a location register (8) during an attach or location 
update procedure or a PDP context activation. 

23. A method according to claim 21 , wherein the subscriber-specific screening list 
is initialized as an empty list and updated each time a data packet with a connection 
endpoint identification not included in the subscriber-specific screening list is received. 

24. (Amended) A method according to [any one of] claim[s] 21 [to 23], further 
comprising the step of propagating the subscriber-specific screening list to other 
network elements, if it is has been modified by a subscriber. 

25. (Amended) A method according to [any one of] claim[s] 21 [to 24], wherein the 
screening control is performed in a network element for downlink packets and in the 
subscriber terminal for uplink packets. 

26. (Amended) A method according to [any one of] claim[s] 21 [to 24], wherein an 
uplink traffic transmitted from the subscriber terminal via the packet switched 
connection is monitored and the subscriber terminal is commanded to screen data 



packets transmitted to a packet destination identified as a denied packet destination 
based on said subscriber-specific screening list. 

27. A method according to claim 18, wherein the screening list comprises a charging 
information. 

28. A packet switching control method for controlling a packet switched connection 
between a subscriber terminal (1) and an end terminal (5) identified by a connection 
endpoint identification in a communication network (4), comprising the steps of: 
providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; 

selectively setting a detection point information for an interrogation of an Intelligent 
Network (IN) service control function for a specific connection endpoint identification in 
the subscriber-specific screening list; and 

triggering an IN interrogation, when a data packet with a connection endpoint 
identification, for which a detection point information is set, is transmitted via the 
packet switched connection. 



